
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
File: CzDLxzPdxGhrNFVM7pbifWHsnC8.mft (raw, json)
Hash identifier: /BKOXIwx4kIo2+7VSosofZUPElfGn9bSbIwhgqE79tQ=
Subject key identifier: D8:3F:E0:86:A0:79:E7:10:B4:8F:06:6F:17:34:20:A8:C6:65:A3:4A
Authority key identifier: 0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F
Certificate issuer: /CN=A9158019/serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
Manifest number: 31
Signing time: Sat 13 Jun 2026 08:44:58 +0000
Manifest this update: Sat 13 Jun 2026 08:44:58 +0000
Manifest next update: Sat 20 Jun 2026 08:44:58 +0000
Files and hashes: 1: CzDLxzPdxGhrNFVM7pbifWHsnC8.crl (hash: hJoJYLaE57BuXydVfKQ7k/4P0xsAe97gLfjU7Qgr5lY=)
2: B7547D60211611F1BB46DDA8253D8C67.roa (hash: 4BrnHPdYyx2nAq2NGD+uA7GhClifWXkJBKq44iaOpAc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl
rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158019, serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F
Validity
Not Before: Jun 13 08:44:58 2026 GMT
Not After : Jun 20 08:44:58 2026 GMT
Subject: CN=6a2d188a-1ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:b1:47:43:5d:41:0f:71:84:44:e3:1b:42:
27:7c:e5:4c:60:88:74:f0:5e:6c:5a:d3:52:b7:ad:
5a:ac:8f:b0:2d:c2:52:13:91:99:44:56:e7:29:9b:
de:e9:bb:8c:41:ff:1b:06:a2:7f:a9:89:cc:f9:df:
57:41:1f:4e:7b:e1:1f:a6:b5:87:55:13:a2:df:35:
1a:ce:94:4e:4f:ea:78:c7:f6:9e:9b:63:f1:72:a8:
8f:52:35:c4:47:ea:f1:1b:22:3a:07:0f:b3:7d:6a:
09:2b:55:fb:b6:c5:27:11:66:99:ab:ea:e1:8c:9d:
dd:c3:bb:de:5d:a5:e8:af:12:be:60:d2:b1:6f:a2:
8b:ca:66:5a:a4:44:3e:2a:6f:1f:5f:3f:ad:68:91:
19:f9:e6:4e:e2:c3:99:a6:e9:61:18:c8:14:02:3e:
ed:7b:93:94:27:7f:d8:3b:ce:8b:65:f6:a2:b8:9e:
24:5f:88:9a:73:e1:95:ec:93:e5:b9:e1:d1:91:95:
14:d6:a0:d0:d8:2d:dc:4e:d8:91:c1:d4:8f:20:80:
5e:3e:6f:16:7d:ce:52:8c:e1:e3:2c:ad:20:21:08:
c7:c8:5f:b9:2c:8c:5d:93:89:5b:c1:2c:c0:7e:bc:
25:2e:ba:c8:d1:4d:83:7b:31:e5:52:7c:dc:60:81:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:E0:86:A0:79:E7:10:B4:8F:06:6F:17:34:20:A8:C6:65:A3:4A
X509v3 Authority Key Identifier:
keyid:0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:4c:4f:1e:88:13:4a:94:4d:6f:2d:55:9c:a6:a5:db:0b:3e:
48:3b:16:76:af:f8:18:ed:99:23:f5:45:8c:2d:89:1d:3b:01:
da:52:16:4a:de:da:dd:47:0a:6d:2b:1e:ea:fc:ee:78:9f:4c:
14:f6:9d:6a:f6:51:bd:38:d1:00:17:d2:c6:a1:20:72:76:6c:
33:b3:b2:64:b2:ff:25:44:8b:18:7e:94:76:44:b3:b0:2d:fb:
b5:c2:a3:c6:d7:b1:a8:34:b5:c7:ed:9b:23:e9:d5:d0:9f:99:
a9:6f:3d:60:9e:04:93:6a:ab:f7:fb:a9:ea:db:11:ff:4b:8e:
b5:8d:18:01:39:c2:05:70:d8:f4:69:45:8a:86:28:3e:27:15:
84:e6:9a:6e:08:0e:8b:1e:91:69:ba:44:cf:4e:87:cb:71:2d:
45:e7:96:cc:f7:db:23:df:73:05:33:1a:9c:43:c3:4c:03:fe:
42:d0:0c:3c:5c:53:98:c5:a6:93:b2:15:b9:31:94:26:8a:a1:
b7:cf:a1:13:56:ab:0d:9e:16:f9:b0:05:76:be:37:da:02:6d:
c7:23:b2:5d:5a:78:1b:ab:e1:db:4c:c5:6b:87:91:03:b2:ab:
a2:1a:59:9e:dc:4b:05:a0:8b:c2:ee:61:76:b9:54:45:19:06:
04:51:33:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:13:45 2026 by rpki-client